If you are building an agent product like this data exfiltration should be the number one risk you are thinking about.